NEAS[.]012765fd98dbc5d7b4d2a12e290ed0c0_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.012765fd98dbc5d7b4d2a12e290ed0c0_JC.exe
Size

337KB
MD5

012765fd98dbc5d7b4d2a12e290ed0c0
SHA1

62c2cfb4d1030916850d27fa7bc09f8022c282b9
SHA256

316d5e914001fd721d589058df468785ffe6cf2d756a32502eb9cd551e0fbe3a
SHA512

6efa81f51a8a866f44a02ec920f70b34658e9f3a9de91408d2312050693e56bb9999ef093adf8530b1b85a662fe84f3327cd4e88952d2464ae5e5f44ffecd143
SSDEEP

1536:WAOXZIt6nkzGAnv+PBOtpJImif1NDWgcIiQAqy5/l0DY+fHxslzp/w8M7i6kTGD:qIJ5YEzM7i6fDUBMWNEiXhFgl42tY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.012765fd98dbc5d7b4d2a12e290ed0c0_JC.exe

Files

NEAS.012765fd98dbc5d7b4d2a12e290ed0c0_JC.exe
.exe windows:4 windows x86

617dad5439c5248428cfe567a5fd45e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
WideCharToMultiByte
CopyFileA
WaitForSingleObject
CreateProcessA
GetStartupInfoA
GetTickCount
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetProcessHeap
lstrlenA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
SetFilePointer
LoadLibraryA
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RaiseException
GetProcAddress
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetLastError
TlsGetValue
SetLastError
LocalFree
RtlFillMemory
LocalAlloc
WriteProcessMemory
ReadProcessMemory
RtlMoveMemory
lstrcpyn
GetVersionExA
LocalSize
CloseHandle
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcess
QueryPerformanceFrequency
OpenProcess
GetCurrentThreadId
GetCurrentProcessId
TlsAlloc
TlsSetValue
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
GetVersion
GetCommandLineA

advapi32

OpenProcessToken
AdjustTokenPrivileges
RegCloseKey
RegSetValueExA
RegCreateKeyExA
LookupPrivilegeValueA

user32

LoadIconA
LoadCursorA
RegisterClassExA
GetClassInfoExA
EnableWindow
MoveWindow
BeginPaint
wsprintfA
MessageBoxA
SetWindowPos
SetWindowRgn
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
EndPaint
IntersectRect
GetWindowLongA
PostQuitMessage
CreateWindowExA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
EqualRect
UpdateWindow
ShowWindow
IsWindowVisible
SetWindowLongA
IsWindow
RegisterHotKey
GetWindowRect
CallWindowProcA
ReleaseDC
FillRect
GetSysColor
GetDC
DefWindowProcA
TrackMouseEvent
SendMessageA
GetParent
InvalidateRect

gdi32

TextOutA
SetBkColor
DeleteObject
StretchBlt
CreateSolidBrush
SetTextColor
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
CreateDIBitmap
CreateRectRgn
GetPixel
CombineRgn
CreateFontA
DeleteDC
CreatePatternBrush

msimg32

TransparentBlt

shlwapi

StrDupA

ole32

CLSIDFromProgID
CoInitialize
CoUninitialize
OleRun
CoCreateInstance
CLSIDFromString

oleaut32

VarR8FromBool
VarR8FromCy
LoadTypeLi
SysAllocString
VariantClear
SafeArrayDestroy
SafeArrayCreate
RegisterTypeLi

Sections

.text
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

617dad5439c5248428cfe567a5fd45e9

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

msimg32

shlwapi

ole32

oleaut32

Sections

.text Size: 136KB - Virtual size: 134KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 20KB - Virtual size: 71KB

.text
Size: 136KB - Virtual size: 134KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 20KB - Virtual size: 71KB